Description
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation WebSphere Portal
5.1.0.0affected5.1.0.1affected5.1.0.2affected5.1.0.3affected5.1.0.4affected5.1.0.5affected6.0.0.0affected6.0.0.1affected6.0.1.1affected6.0.1.3affected6.1.0.0affected6.0.1.5affected6.0.1.2affected6.0.1.4affected6.1.0.1affected6.1.0.2affected6.1.0.3affected6.0.1.5 build wp6015_008_01affected6.0.0.2affected6.0.0.3affected6.0.0.4affected6.0.1.0affected6.0.1.6affected6.0.1.7affected6.1.5.0affected7.0affected7.0.0.1affected8.0affected1.0affected8.0.0.1affected7.0.0.2affected6.1.0.4affected6.1.0.5affected6.1.0.6affected6.1.5.1affected6.1.5.2affected6.1.5.3affected8affected7affected6.1.5affected6.1.0affected6.0.1affected6.0.0affected8.5affected6.1affected6.0affected8.5.0affected